the brief
THE TICKET
“I changed the id in the request and got somebody else’s record back.” That class of defect is planted in TapTrust Federal (TapTrust Federal Credit Union). Same mistake you've met elsewhere — this app's version of it.
WHAT A WORKING TESTER WOULD ASK
If I take a valid id belonging to somebody else and pass it with my own session, do I get their data?
WHERE TO WORK
— Account reads with ids that are not yours
— The teller approval queue, called without teller standing
YOUR JOB
Reproduce it, then file a report for every defect you can pin down — what you saw, what you expected, exact steps. 2 planted defects are in scope.
Hard·banking·bring patience
what we grade
Coverage
Each bug found, weighted by severity
Severity class.
Correct triage of each bug
Reproduction quality
Clear, ordered, reproducible steps
Evidence
Environment, test data, proof
file a report
Nothing filed yet — open the composer and write it down before it gets away.
playing as guest —
sign in to save this run & your time